This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/4c0de9-42a3-44dc-998e-523d20925dad/1/GWCuZmpoK0JPbJlKsuAU3Dxk-88.mft File: GWCuZmpoK0JPbJlKsuAU3Dxk-88.mft (raw, json) Hash identifier: U2W9EWB8oKxlvw3i7N/I6VdVyt7twl99tncwfj1/ak0= Subject key identifier: BF:A0:B1:68:95:0F:02:11:1D:8A:35:58:13:56:49:EF:B1:2E:5C:A3 Authority key identifier: 19:60:AE:66:6A:68:2B:42:4F:6C:99:4A:B2:E0:14:DC:3C:64:FB:CF Certificate issuer: /CN=1960ae666a682b424f6c994ab2e014dc3c64fbcf Certificate serial: 019B68E9CE4D93EB394E6D21F05A82950440 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GWCuZmpoK0JPbJlKsuAU3Dxk-88.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/4c0de9-42a3-44dc-998e-523d20925dad/1/GWCuZmpoK0JPbJlKsuAU3Dxk-88.mft Manifest number: 067E Signing time: Mon 29 Dec 2025 07:01:51 +0000 Manifest this update: Mon 29 Dec 2025 07:01:51 +0000 Manifest next update: Tue 30 Dec 2025 07:01:51 +0000 Files and hashes: 1: E9TifD1sfMQN679LyLG0hiwKeX4.roa (hash: 7SvhO02KqCz55FUneR+KgndNdPdJd/1FqEb2wmvkStA=) 2: GWCuZmpoK0JPbJlKsuAU3Dxk-88.crl (hash: ztifBY8smO6ZQepX4vFax03M0+fOmeLcsS0BjQaYYgQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/4c0de9-42a3-44dc-998e-523d20925dad/1/GWCuZmpoK0JPbJlKsuAU3Dxk-88.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/4c0de9-42a3-44dc-998e-523d20925dad/1/GWCuZmpoK0JPbJlKsuAU3Dxk-88.mft rsync://rpki.ripe.net/repository/DEFAULT/GWCuZmpoK0JPbJlKsuAU3Dxk-88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 07:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:68:e9:ce:4d:93:eb:39:4e:6d:21:f0:5a:82:95:04:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1960ae666a682b424f6c994ab2e014dc3c64fbcf Validity Not Before: Dec 29 07:01:51 2025 GMT Not After : Dec 30 07:01:51 2025 GMT Subject: CN=bfa0b168950f02111d8a3558135649efb12e5ca3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:21:d1:50:56:ba:e6:3d:94:f6:e6:b8:e7:e3: 53:30:a2:41:38:af:43:f1:2d:0f:3b:25:92:7e:72: 93:10:16:0a:54:0b:36:74:29:7a:bb:ec:94:19:45: 75:08:ff:8b:e9:d6:ec:6e:ac:48:ec:f5:a3:5c:50: 52:08:57:96:dd:6c:c1:10:40:89:87:6c:8a:19:d5: dd:ad:1a:d7:26:fc:16:96:fc:9d:38:a1:47:80:dd: f0:13:6d:1f:2a:d5:55:cb:f0:70:6c:ab:13:d9:4d: 29:d4:ce:62:5c:b7:15:85:57:95:74:7d:46:d3:fc: 08:94:4b:4b:a7:5f:67:8d:aa:6c:51:35:f2:b0:2b: c1:a0:04:de:b2:ec:b0:3e:80:51:70:30:46:d5:6e: b7:ba:34:f5:c9:47:9d:36:ef:fc:58:18:09:fc:9a: cf:b9:45:b5:d8:c7:e4:97:ba:59:66:0c:ab:3d:7c: a6:20:2b:f2:0d:fc:30:25:60:a4:2c:30:8d:df:e1: d7:da:8e:27:2e:2b:c8:85:45:94:fc:aa:0c:d7:e3: 5f:1e:da:c9:53:63:36:15:c8:87:95:2e:d9:c7:c1: 21:bc:97:ab:44:6e:bf:ad:66:cb:6a:bc:f3:a0:2a: 9a:2f:4a:aa:1f:f7:25:cf:35:0f:43:c4:11:16:f3: 87:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:A0:B1:68:95:0F:02:11:1D:8A:35:58:13:56:49:EF:B1:2E:5C:A3 X509v3 Authority Key Identifier: keyid:19:60:AE:66:6A:68:2B:42:4F:6C:99:4A:B2:E0:14:DC:3C:64:FB:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWCuZmpoK0JPbJlKsuAU3Dxk-88.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/4c0de9-42a3-44dc-998e-523d20925dad/1/GWCuZmpoK0JPbJlKsuAU3Dxk-88.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/4c0de9-42a3-44dc-998e-523d20925dad/1/GWCuZmpoK0JPbJlKsuAU3Dxk-88.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:3f:1f:2a:dd:8c:9a:12:b9:8f:06:29:b8:f5:4d:03:d5:68: f0:10:4d:14:3f:dc:ac:92:d4:c7:a6:94:b3:c3:54:c6:c5:c3: ff:42:0a:b9:b4:06:bf:f5:d9:43:1c:d3:b3:af:0d:f8:e6:1f: fe:d9:2c:4d:b4:88:79:40:86:70:12:45:c9:76:f4:b2:9d:ea: 32:07:39:26:e3:ee:7c:1d:22:b2:e4:b4:16:04:b1:fd:3b:b3: ff:f4:e6:51:16:ab:1a:1f:24:97:9b:96:29:6f:70:78:58:73: 9d:35:92:7e:12:83:43:c7:6b:ad:83:e7:f3:a1:bf:73:71:a0: 99:d3:fd:f9:76:15:ae:a6:f0:78:24:fa:cd:6c:39:65:cc:3a: 3b:c8:49:e8:1a:7f:22:7b:40:ea:d1:7c:05:c2:f0:7d:73:35: 67:79:b1:1f:33:27:cd:2c:fc:65:dc:4c:06:43:f1:45:bd:32: 09:ce:9e:bc:1e:b8:ca:82:c0:43:74:b3:ae:c1:dc:a3:5d:48: 03:dd:63:6e:e9:81:8d:a7:59:65:4c:a1:c5:88:72:2a:5f:5a: c7:35:25:80:c3:d1:12:e3:e4:3e:93:22:1f:df:cf:c2:89:b9: 6e:fd:93:fa:55:c5:ef:a6:18:37:f3:b8:5a:d8:c1:08:4d:fc: c3:a9:c4:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZto6c5Nk+s5Tm0h8FqClQRAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NjBhZTY2NmE2ODJiNDI0ZjZjOTk0YWIyZTAxNGRjM2M2 NGZiY2YwHhcNMjUxMjI5MDcwMTUxWhcNMjUxMjMwMDcwMTUxWjAzMTEwLwYDVQQD EyhiZmEwYjE2ODk1MGYwMjExMWQ4YTM1NTgxMzU2NDllZmIxMmU1Y2EzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCHRUFa65j2U9ua45+NTMKJBOK9D 8S0POyWSfnKTEBYKVAs2dCl6u+yUGUV1CP+L6dbsbqxI7PWjXFBSCFeW3WzBEECJ h2yKGdXdrRrXJvwWlvydOKFHgN3wE20fKtVVy/BwbKsT2U0p1M5iXLcVhVeVdH1G 0/wIlEtLp19njapsUTXysCvBoATesuywPoBRcDBG1W63ujT1yUedNu/8WBgJ/JrP uUW12Mfkl7pZZgyrPXymICvyDfwwJWCkLDCN3+HX2o4nLivIhUWU/KoM1+NfHtrJ U2M2FciHlS7Zx8EhvJerRG6/rWbLarzzoCqaL0qqH/clzzUPQ8QRFvOHZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL+gsWiVDwIRHYo1WBNWSe+xLlyjMB8GA1UdIwQY MBaAFBlgrmZqaCtCT2yZSrLgFNw8ZPvPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1dDdVptcG9LMEpQYkpsS3N1QVUzRHhrLTg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi80YzBkZTktNDJhMy00NGRjLTk5OGUt NTIzZDIwOTI1ZGFkLzEvR1dDdVptcG9LMEpQYkpsS3N1QVUzRHhrLTg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi80YzBkZTktNDJhMy00NGRjLTk5OGUtNTIzZDIwOTI1ZGFk LzEvR1dDdVptcG9LMEpQYkpsS3N1QVUzRHhrLTg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmD8fKt2M mhK5jwYpuPVNA9Vo8BBNFD/crJLUx6aUs8NUxsXD/0IKubQGv/XZQxzTs68N+OYf /tksTbSIeUCGcBJFyXb0sp3qMgc5JuPufB0isuS0FgSx/Tuz//TmURarGh8kl5uW KW9weFhznTWSfhKDQ8drrYPn86G/c3GgmdP9+XYVrqbweCT6zWw5Zcw6O8hJ6Bp/ IntA6tF8BcLwfXM1Z3mxHzMnzSz8ZdxMBkPxRb0yCc6evB64yoLAQ3SzrsHco11I A91jbumBjadZZUyhxYhyKl9axzUlgMPREuPkPpMiH9/Pwom5bv2T+lXF76YYN/O4 WtjBCE38w6nEtA== -----END CERTIFICATE-----Generated at Mon Dec 29 16:28:12 2025 by rpki-client